Crypto Crackdown: FIU Mandates Selfie and ‘Penny-Drop’ for Indian KYC

News Context

1. Source and Regulatory Context

• Official reporting source. The details regarding the updated KYC (Know Your Customer) protocols for virtual digital assets were reported by the Press Trust of India (PTI) and can be accessed here: https://epaper.thehindu.com/ccidist-ws/th/th_international/issues/165840/OPS/GMFFD491C.1+GS9FE7HLM.1.html
• Identifying the regulator. The Financial Intelligence Unit (FIU), operating under the Union Finance Ministry, is the single-point regulator for crypto exchanges under the Prevention of Money Laundering Act (PMLA).
• Updating the timeline. These fresh guidelines were issued on January 8, 2026, marking a significant update to the original AML/CFT framework first established in March 2023.

2. Mandatory Biometric and Geolocation Verification

• Implementing liveness detection. Cryptocurrency exchanges are now “mandatorily” required to capture a selfie of the customer with active liveness detection to prevent identity fraud through deepfakes or static photos.
• Recording geographical coordinates. During the onboarding process, exchanges must record the exact latitude and longitude of the user’s location to verify where the account is being created.
• Tracking digital footprints. The protocols also require the storage of date and timestamps, along with the user’s IP (Internet Protocol) address, as part of the client due diligence measures.

3. The ‘Penny-Drop’ Bank Verification

• Confirming account ownership. To ensure the validity of the linked bank account, exchanges must employ the ‘penny-drop’ method, where a micro-transaction (usually ₹1) is sent to the user’s account.
• Matching name and details. This process allows the exchange to confirm that the name registered on the bank account matches the name provided during the crypto platform registration.
• Preventing third-party funding. By mandating this check, the FIU aims to stop users from funding crypto wallets through accounts belonging to other individuals, a common tactic in money laundering.

4. Registration and Reporting Obligations

• Mandating FIU registration. All cryptocurrency exchanges operating within Indian borders must officially register with the FIU as “reporting entities.”
• Reporting suspicious activity. Registered exchanges are legally obligated to submit regular reports on suspicious transactions (STRs) to the agency for real-time monitoring.
• Maintaining client records. The guidelines require exchanges to maintain detailed historical records of all clients to assist in investigations related to terror financing and proliferation risks.

5. Restrictions on Anonymity-Enhancing Tools

• Banning tumblers and mixers. The FIU has explicitly directed that exchanges shall “not” facilitate transactions involving tumblers or mixers, which are used to obscure the source of crypto funds.
• Blocking anonymity tokens. Transactions linked to anonymity-enhancing tokens (Privacy Coins) are strictly discouraged to ensure all movements of digital assets remain traceable.
• Ending obfuscation tactics. These measures are designed to strip away the veil of anonymity often associated with blockchain technology, making the Indian crypto ecosystem more transparent for law enforcement.

6. Discouraging ICOs and Token Offerings

• Regulating new asset launches. The guidelines strongly discourage exchanges from facilitating Initial Coin Offerings (ICOs) and Initial Token Offerings (ITOs).
• Comparing to stock markets. The FIU views these offerings as equivalent to IPOs in traditional stock markets but notes they currently lack the same level of rigorous oversight and investor protection.
• Protecting retail investors. By cooling the market for new token launches, the regulator aims to reduce the prevalence of “rug pulls” and fraudulent investment schemes.

7. Tax and Legal Tender Status

• Denying legal tender status. The FIU re-emphasized that India does not recognize cryptocurrency as legal tender for any form of payment or settlement.
• Upholding tax obligations. Despite the lack of legal tender status, all virtual digital assets remain subject to the Income-Tax law, including the 30% flat tax on gains and 1% TDS on transactions.
• Clarifying the paradox. The regulator maintains that taxing the assets does not equate to their legalization as currency, but rather recognizes them as taxable property.

8. Combating Terrorist Financing (CFT)

• Targeting proliferation risks. A core objective of the January 8 update is to curb the use of virtual assets in financing weapons of mass destruction and international terrorism.
• Aligning with global standards. The measures bring India’s crypto regulations closer to the recommendations of the Financial Action Task Force (FATF), the global money laundering watchdog.
• Empowering financial intelligence. Enhanced data collection allows the FIU to cross-reference crypto transaction patterns with global terror-financing blacklists.

9. Impact on User Onboarding

• Increasing friction for users. The requirement for PAN, selfies, and geolocation adds significant “friction” to the sign-up process, potentially slowing down the influx of new retail investors.
• Ensuring “High-Quality” KYC. The FIU argues that the higher barrier to entry is necessary to ensure that only legitimate, verifiable users are participating in the digital asset market.
• Standardizing the industry. These rules force smaller, less-compliant exchanges to either upgrade their technology stacks or cease operations in the Indian market.

10. Future Enforcement and Compliance

• Monitoring offshore exchanges. The FIU continues to monitor offshore platforms that serve Indian residents, requiring them to comply with the same PMLA standards as domestic exchanges.
• Issuing show-cause notices. The agency has previously demonstrated its willingness to block access to non-compliant foreign URLs, a trend expected to continue under the new guidelines.
• Creating a “White List.” Industry experts predict that the FIU registration process will eventually lead to a “white list” of approved platforms for Indian citizens to use safely.